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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for the 
rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

.(a) the invention was known or used by others in this country, or patented or described in a printed 
pubhcation in this or a foreign country, before the invention thereof by the applicant for a patent. 

2. Claims 1,8, 15 and 21, claims 5 and 1 1 claims 2, 9 and 16, claims 6, 12, 19 and 22, claims 7, 20 and 23 are 
rejected under 35 U.S.C. 102(a) as being anticipated by Yoshiura et al (6,131,162 hereinafter Yoshiura). 



3. The following table lists the independent claims in parallel for ease of inspection. 
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g. As to claim 1: 

i Claim 1 claims: 

(1) 1. A method comprising: 

(a) digitally signing 

(i) with a private key 

(ii) to provide a digital signature; 

(iii) a web page 

1) that includes 
a) a trigger 

(b) transmitting 

(i) the web page rthat include the triggerL 

(ii) the digital signature, and 

(iii) a digital certificate 

(iv) from a first coaiQiJMlter system 

(v) to a second computer system; and 

(c) responsive to the trigger, 

(i) automatically verifying 

1) the digital signature 

2) on the second computer system 

3) using a public key corresponding to the private key. 

ii Yoshiura et al (6, 1 3 1 , 1 62 herein after Yoshuira) teaches [see Detailed Description Text - DETX ( 1 72), 
(218)]: 

( 1 ) digitally signing 

(a) a web page 

(i) the includes 

1) a trigger [i.e., a mark], 

(b) to provide/[create] 

(i) a digital signature [i.e., the digital signature contained in the mark], 

(2) transmitting 

(a) the web page, 

(b) the digital signature [contained in the mark] 

(c) from a first con^uter system 

(d) to a second computer system; and 

(3) responsive to the trigger/[mark] 
(a) verifying 

(i) the digital signature 

(ii) on the second computer system 

(iii) using a key corresponding to a key used to generate the digital signature. 



h. As to claims 8,15 and 2 1 : 

i These claims have limitations that are similar to those of claim 1 . These claims are thus similarly 
rejected with the same rationales applied against claim 1 . 
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i. As claims 5 and 1 1 : 
i These claims claim: 

(1) .5. The method of claim 1 wherein 
(a) digitally signing comprises: 

(i) hashing the web page to provide a message digest; and 

(ii) digitally signing the message digest with a private key to provide the digital signature. 

(2) .11. The apparatus of claim 8 wherein the processor 
(a) automatically verifies 

(i) the digital signature of the web page 

(ii) by 

1) hashing the web page to provide a calculated message digest; 

2) decrypting the digital signature using the public key to provide a recovered message 
digest; and 

3) comparing the calculated message digest and the recovered message digest. 



ii Yoshiura teaches: 

(1) digitally signing a web-page, which signing conq^rising: 

(a) hashing 

(i) the web page 

(ii) to provide 

I) a message digest/[hash value]; and 

(b) digitally signing/[encrypting] 

(i) the message digest /[hash value] 

(ii) with a private key to 

(iii) provide the digital signature, 

(2) in that Yoshiura teaches the following: 

(a) [Detailed Description Text - DETX (211)]: 

(i) "That is, the server 1 810a calculates a hash value 2807 of Web page data 2806 sent with 
the mark-send request (step 2801), encrypts the hash value 2807 with a private key 2808 
of the mark management organization 1 121 to generate a digital signat ure 2809 (step 
2802), and embeds the generated digital signature 2809 into a mark 2810, stored in the 
mark management DB 1 123, as a digital watermark (step 2803). The server 1810a then 
modifies the Web page data 2806 sent with the mark-send request so that a mark 281 1 
into which the digital watermark was embedded is displayed in the Web page 2806 (step 
2804), and sends modified Web page data 2812 to the mark acquisition program e 3306 
running on the vendor terminal 1 1 12a (step 2805)"; and 

(b) [Detailed Description Text - DETX (2 1 8)] : 

(i) "In the eighth embodiment described above, a mark in which a digital signature. 

generated by encrypting the hash value of a Web page using the private key of the mark 
management organization mark, is embedded as a digital watermark and is pasted in a 
Web page instead of a simple mark. This type of mark enables the authentication of the 
relation between the Web page and the mark management organization to be validated 
correctly. The Web page also contains a mark showing the related 
individual/organization. In addition, because the digital signature for the hash value of 
the Web page data is always embedded into the mark as the digital watermark, the 
processing does not depend on whether a plurality of types of data are included in the 
Web page. Embedding the digital watermark into the mark in the Web page as the digital 
signature eliminates the need to manage the digital signature separately firom the Web 
page data. Because the mark, usually displayed in the Web page, is used to authenticate 
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that the mark is given to the Web page, the eighth embodiment does not affect the 
appearance of the Web page". 

lii Yoshiura teaches: 

(1) verifying the digital signature of the web-page by: 

(a) hashing [step 2904] 

(i) the web page 

(ii) to provide 

1) a calculated message digest; 

(b) decrypting [step 2904] 

(i) the digital signature 

(ii) using the public key 

(iii) to provide 

1) a recovered message digest; and 

(c) comparing [step 2905] 

(i) the calculated message digest and 

(ii) the recovered message digest, 

(2) in that Yoshiura teaches the following: 
(a) [Brief Summary Text- BSTX (16)]: 

(i) "In this case, the digital signatures created by n signature creators are verified as follows. 
The final digital signature is decrypted by the public key of the final (n-th) signature 
creator, the decrypted digital signature is then decrypted by the public key of the (n-l)th 
signature creator, and so on, until the digital signature of the first signature creator is 
decrypted. If the result obtained by dcciypting the signature by the public key of the first 
signature creator matches the hash value of the original data, it is determined that the 
digital signature was created by n signature creators each having his or her own public 
key and that the digital signature corresponds to the data. However, when the sequence 
in which the signature creators created signatures is not knovm, this technique requires 
that the above process be performed for the number of times generated by permutating all 
signature creators." 



j. As per claims 2, 16 and 9: 
i These claims claim: 

(1) .2, The method of claim 1 wherein 

(a) transmitting comprises transmitting 

(i) the web page, 

(ii) the digital signature, and 

(iii) the digital certificate including 

1) the public key corresponding to the private key 

(iv) from the first computer system 

(v) to the second computer system. 

(2) . 1 6. The method of claim 1 5 wherein 
(a) transmitting comprises transmitting 

(i) the web page, 

(ii) the digital signature, and 

1) the digital certificate including 

a) a public key corresponding to the private key 

(iii) to the computer system, 
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(iv) in response to receiving the request for the web page. 

(3) .9. The apparatus of claim 8 wherein 
(a) the processor, 

(i) in response to the one or more instructions, 

(ii) to receive 

1) the web page, 

2) digital signature, and 

3) the digital certificate 

a) including the public key. 

ii YoshiuraC162) teaches [BriefSummary Text -BSTX (8), (13), (16), (32), (56), (58), (66), (69), 
(72), (73) and (74)]: 
(1) transmitting 

(a) a web-page, 

(b) a digital signature; and 

(c) the public key 

(d) form the first computer 

(e) to the second computer. 



k. As to claims 6, 19, 12, and 22: 

i These claims claim: 

(1) .6. The method of claim 1 wherein the trigger includes 
(a) one or more of the following: 

(i) a flag, 

(ii) variable, 

(iii) one or more lines of code, and 

(iv) subroutine. 

(2) .19. The method of claim 15 wherein the trigger includes 
(a) one or more of the following: 

(i) a flag, 

(ii) variable, 

(iii) one or more lines of code, and 

(iv) subroutine. 

(3) .12. The apparatus of claim 8 wherein the trigger includes 
(a) one or more of the following: 

(i) a flag, 

(ii) variable, 

(iii) one or more lines of code, and 

(iv) subroutine. 

(4) .22. The method of claim 21 wherein the trigger includes 
(a) one or more of the following: 

(i) a flag, 

(ii) variable, 

(iii) one or more lines of code, and 

(iv) subroutine. 

ii Yoshiura ('162) teaches: 

( 1 ) that the trigger/[mark] include 
(a) flag/[a water mark]. 
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1. As to claims 7, 20 and 23: 

i These claims claim: 

(1) .7. The method of claim 1 further comprising one of the following: 

(a) embedding the trigger in the web page; 

(b) incorporating the trigger in the web page; 

(c) appending the trigger to the web page; and 

(d) placing the trigger in a HTTP header of the web page. 

(2) .20, The method of claim 15 further comprising one of the following: 

(a) embedding the trigger in the web page; 

(b) incorporating the trigger in the web page; 

(c) appending the trigger to the web page; and 

(d) placing the trigger in a HTTP header of the web page. 

(3) .23. The method of claim 21 further comprising one of the following: 

(a) embedding the trigger in the web page; 

(b) incorporating the trigger in the web page; 

(c) appending the trigger to the web page; and 

(d) placing the trigger in a HTTP header of the web page. 

ii Yoshiura C 1 62) teaches [see Detailed Description Text 0 DETX (218); Claims Text - CLTX (152), 
174]: 

( 1 ) embedding/incorporating/appending/"generating and embedding" 

(a) a trigger [mark/information for checking the validity of a Web page] 

(b) into a web-page. 



Claim Rejections - 35 USC § 103 



1. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness rejections set 
forth in this Office action: 

.(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth 
in section 102 of this title, if the differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

2. Claim 3, 4, 17, 18 and 10 are rejected under 35 U.S.C. 103(a) as being obvious over Yoshiura et al 
(6,131,162 hereinafter Yoshiura) as applied to claims 1,8, 15 and 21 above, and further in view of either common 
practice in the art of Aieta et al. (6,269,349 hereinafter Aieta). 



m. As to claims 3, 4, 17, 18 and 10: 
i These claims claims: 

(1) .3. The method of claim 1 wherein transmitting comprises transmitting 

(a) the web page, 

(b) the digital signature, 

(c) the digital certificate, and 

(d) an object 

(e) from the first computer system 
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(f) to the second coix^uter system. 

(2) .4. The method of claim 3 wherein automatically verifying comprises 
(a) responsive to the trigger, 
(i) automatically verifying 

1) the digital signature 

2) on the second computer system 

3) using the object. 



(3) .17. The method of claim 15 wherein transmitting comprises transmitting 

(a) the web page, 

(b) the digital signature, 

(c) the digital certificate, and 

(d) an object 

(e) to the computer system, 

(f) in response to receiving the request for the web page. 



(4) .18. The method of claim 1 7 wherein 
(a) said object, on the computer system, 

(i) for detecting the trigger, and 

(ii) in response to detecting the trigger, 
1 ) automatically verifying 

a) the digital signature of the web page. 



(5) .10. The apparatus of claim 8 wherein the processor, in response to the one or more instructions, to 
receive 

(a) the web page, 

(b) digital signature, 

(c) digital certificate, and 

(d) an object, 

(1) said object being executed 

1) by the processor 

2) to automatically verify the digital signature of the web page. 



ii Official notice is hereby taken that: 
(1) transmitting 

(a) an executable object 

(i) along with information, 

1) which is to be processed 
a) by the executable object, 

(ii) to a receiver/destination 

(b) is notoriously old and well known in the art. 



iii Aieta et al (6,269,349 hereinafter Aieta) teaches [see Claims Text - CLTX (38), CLTX (65)]: 

(1) transmitting an executable obiect to the client; and 

(2) 27. The system of claim 17, wherein when receiving the private information, the processor is 
further configured to transmit an executable object to the client and receive the private information 
from the object after the object is activated at the client. 



iv It would have been obvious to a person having ordinary skill in the art at the time the invention was 
made to: 

(1) apply the concept of sending an executable object from transmitting node to receiving node as that 
of Aieta to have the receiving node executes a procedure according the instructions of the 
executable object. 
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V The skilled person would have been motivated to upload (optionally) an executable object to a 

receiving node (such as that of Yoshiura) to have the receiving node executes the executable object to 
perform the function thereat because: 

(1) it is a common practice in the art, especially when it is aware by the transmitting node that 
receiving node might not have the executable object; and 

(2) Aieta teach the usage of such executable object, which is sent by a transmitting node and executed 
by a receiving node. 



3, Claim 13, 14 and 24 are rejected under 35 U.S.C. 103(a) as being obvious over Yoshiura et al (6,131,162 
hereinafter Yoshiura) as applied to claims 1, 8, 15 and 21 above, and further in view of common practice in the art. 



n. As to claims 13, 14 and 24: 

i These claims claim: 

( 1 ) .13. The apparatus of claim 8 wherein the memory includes 
(a) a software routine 

(i) for plug-in comprising the one or more instructions. 

(2) .14. The apparatus of claim 8 wherein the memory includes 
(a) one of 

(i) a browser software program and 

(ii) a plug-in comprising the one or more instructions. 

(3) .24. The method of claim 21 wherein 

(a) the program is one or more of the following: 

(i) a plug in and 

(ii) browser program. 

ii Official notice is hereby taken that: 

(1) memory [such as CD, DVD, memory-card, smart-card], 

(a) which include instruction code [plug-in instruction code] 
(i) for causing 

1) a computer 

a) (into which it is plugged) 

b) to request 

i) web page(s) from a server/[source]/[provider]/[vendor]/[provider of the 
memory], 

(b) is notoriously old and well known in the art. 

(2) [An example of such well knovm feature is American Online promotional storage medium that are 
sent to people so that they can load into their computer for downloading AOL web pages for 
subscribing service from AOL server(s)]. 

iii It would have been obvious to a person having ordinary skill in the art at the time the invention was 
made to: 

(1) apply the teaching of Yoshiura ('162) to a web page that is downloaded from a well known plug- 
in instruction. 

iv The skilled person would have been motivated to do such application because: 

(1) the teaching of Yoshiura is to authenticate that the web-page is coming from an authentic web- 
page provider; and 

(2) Internet browser (such as that of American Online) download web-page(s) from web-page 
provider(s). 
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8. The prior art made of record and not relied upon is considered pertinent to applicant's disclosure. 

9. Any inquiry concerning this communication or earlier communications from the examiner should be directed to 
Ly V. Hua whose telephone number is (703) 305-9684. The examiner can normally be reached on Monday to 
Friday from 9:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Vu Kim, can be 
reached on 703-305-4303. The fax phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent Application Information 
Retrieval (PAIR) system. Status information for published applications may be obtained from either Private 
PAIR or Public PAIR. Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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